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A method for managing a global copy protection system for home networks is provided. Particularly, the UeRned method protects 
copyrighted digital content from unauthorized copying as it is transmitted across digital interfaces, provided a practical way of creating 
legitimate copies of broadcast and prerecorded content, and prevents illefgitimate copies from being viewed. 
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A COPY PROTECTION SYSTEM FOR HOME NETWORKS 

Field of the Invention 

5 This invention concerns a system that may be used to manage 

access to a copy of a scrambled digital stream, such as a program or event. The 
scrambled digital stream is not descrambled until it is determined that the copy of 
the program is legitimate. 

10 Background of the Invention 



10 



20 



Toda/s NTSC televisions receive broadcast services from a variety 
of sen/ice providers. Some television receivers are capable of receiving 
unscrambled information or programs from broadcast, satellite and cable 
15 networks. Traditionally, cable networks or digital satellite systems providing 
scrambled or encrypted programs usually require a separate stand-alone device 
25 (e.g.. a set-top box) to descramble or decrypt the program. These set-top boxes 

may utifize a removable smart card which contain the necessary decrypting 
algorithms and keys. 

20 

^ In the near hjture. digital televisions (DTVs) and digital set-top 

boxes (STBs) wilt be capable of receiving digital broadcast, cable and satellite 
services. Therefore, the protection of digital video and audio content has become 
one of the major issues for the Infonnation Technology (IT), Consumer 
26 Electronics (CE) and Motion Picture (MP) industries. Analog services can be 
protected reasonably well using a signal distortion mechanism. As a similar 
solution is not possible for digital content, a new approach for delivering digital 
audio and video content with adequate protection against illegal duplication is 
needed. 



35 
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50 



Summary of the Invention 



The present invention resides, in part, in recognition of the 
45 described problem and, in part, in providing a solution to this problem. A method 

35 is described for preventing the use of unauthorized copies of digital content (e.g., 
movies, etc.). The content, presented in MPEG-2 Transport Stream format, is 
scrambled using a common algorithm before release. The scrambling keys and 
other data are included in the Entitlement Control Messages (ECMs) that may be 
encrypted with the public key of a renewable security device (for example, a 
40 removable smart card). The other data includes the price and source (broadcast 
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or pre-r corded) of tha content (or program) and Copy Control Information (CCI). 
Before recording a program, the recording device, connected to the home 
network, first checks if the program is scrambled. If scrambled content is 
detected, the recorder attaches a "copy-mark" or "data item" to each ECM in the 
5 new copy and encrypts them with the public key. The data item indicates that the 
restricted program (actually, that the audio/video component) has been copied. 
In general, every time a scrambled content is copied, its ECMs are encrypted 
once again. This process, called ECM nesting, allows the renewable security 
device coupled to the display unit (e.g., Digital TV) to distinguish between 
10 legitimate and illegitimate copies. 



An event or program as described herein comprises one of the 
20 following: (1) audio/visual data such as a movie, weekly "television" show or a 

documentary; (2) textual data such as an electronic magazine, paper, or weather 
15 news; (3) computer software; (4) binary data such as images or (5) HTML data 
(e.g., web pages). A sen/ice provider may comprise any provider of an event or 
25 program, for example, traditional broadcast television networks, cable networks, 

digital satellita networks, providers of electronic list of events, such as electronic 
program guide providers, and in certain cases internet sen/ice providers. 



20 

30 



A system in accordance with the present invention may utilize public 
key technology. Typically, such a system utilizes one public key (corresponding 
to a smart card) for all service providers. Each smart card has stored therein a 
secret private key that can decrypt messages encrypted by the public key. The 
25 service provider sends a conditional access (CA) entitlement message (i.e.. an 
^ Entitlement Control Message or ECM) in the bit stream encrypted by the public 

key that may contain the name of the service provider, and the name, time, and 
cost of the program. This message is decrypted by the smart card, and the 
appropriate information is stored therein. In one embodiment, the smart card may 
40 30 have a certain amount of credit for purchases that has been enabled by a bank or 

from a sen/ice provider. As long as the limit is not exceeded, services can be 
purchased by the user. At some appropriate preprogrammed time, the smart 
card causes the device (e.g., set-top box) to automatically place a telephone call 
to the CA center. Using a secure channel, the CA center In cooperation with a 
35 bank receives billing information from the smart card and provides additional 
credit. The bank fonvards the information and credits the appropriate service 
provider. 



50 



Generally, the present invention defines a method for managing 
40 access (I.e., viewing) to a copy of a restricted (or scrambled) broadcast or 
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transmitted program. In accordance with one aspect of the present invention, a 
method for copying a program having a scrambled program content component 
(for example, an audio/video program) and an encrypted control component (e.g.. 
ECM) is defined. The method comprises receiving the program in a recording 
apparatus, and attaching a data item to the encrypted control component. The 
data item is used to indicate that the program has been copied. Rnally, the 
encrypted control component and the data item together are encrypted to 
generate a nested control component. 

In accordance with another aspect of the present Invention, a 
method for managing access to a copy of a restricted program comprises 
receiving the restricted program In a processing apparatus. The nested control 
component Is decrypted to obtain the encrypted control component and the data 
item. The encrypted control component is then decrypted to obtain a 
descrambling key and copy control information. The data item and the copy 
control infonmalion Is compared to determine if the copy is authorized (or valid) 
and, If authorized, the program contentcomponent is descrambled using the 
descrambling key. 

In accordance with yet another aspect of the present invention, the 
method for managing access to the recorded copy of a restricted program 
employs a smart card coupled to a video processing apparatus. Particularly, the 
method comprises transfening a cash reserve and entitlements to the smart card, 
receiving the recorded copy of the restricted program in the smart card, obtaining 
a descrambling key, copy control Information and purchase information, 
comparing the copy control information and the data item to determine if said 
copy is authorized and verifying that the cost of the restricted program is less than 
the stored cash resen^e. The cost of the restricted program is then deducted from 
the stored cash reserve, and the audioA^deo component is descrambled using 
the descrambling key. It is within the scope of the invention to substitute a lime 
moder for the "cost moder, that is. the amount of time that a program is 
authorized to be viewed may be controlled. 

These and other aspects of the Invention will be explained with 
reference to a preferred embodiment of the invention shown In the accompanying 
Drawings. 
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Brief Description of the Drawing 

Rgure 1 is a block diagram Illustrating a home network comprised of 
various digital devices that may receive scrambled content from a plurality of 
5 sources; 



IS 



Rgure 2a is a diagram defining a typical entitlement control 
message (ECM); 

10 Rgure 2b Is a diagram defining a nested ECM in accordance with 

one embodiment of the present Invention; 

2^ Rgure 2c is a diagram defining an Extended ECM In accordance 

with another embodiment of the present invention; and 

15 

Rgure 3 is a block diagram illustrating a typical home networi< 
25 employing the present invention. 
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Detailed Description of the Drawing 
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The present invention provides a conditional access system, which 
may be utilized to manage access to copies of restricted programs, for example, 
scrambled (or encrypted) programs. A conditional access system may be 
Integrated into a renewable security device, such as a smart card complying to 
25 the National Renewable Security Standard (NRSS). EtA-679 Part A or Part B. 
The conditional access system, when Implemented within a digital television 
(DTV), set-top box (STB), or the like, permits a user to view only legitimate copies 
of the scrambled program. The functionality of the smart card may be embedded 
within the DTV or STB. 

40 30 

A Cert*rfk;ate Authority (not shown) issues digital certificates and 
public and private key pairs, which are used as explained below. It is within the 
scope of this invention that the role of the certificate authority may be perfomied 
^ by the service providers in collaboration with the manufacturers of the devices. A 

35 billing center may be utilized to manage the user's accounts; updated information 
Is provided as users make arrangements to purchase additional services and as 
these sen/ices are consumed or used. 



Broadcasters are responsible for delivering: (1) the sen/ices, and (2) 
40 the entitlement messages (entitlement control messages) that allow any user to 
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buy those services. The broadcast channel is used only to deliver the services 
and information for access to these sennces. All the remaining transactions are 
carried out using a return channel (i^Gm a modem and a phone connection or a 
cable modem). The present conditional access system may be based on E<ash 
card loading. A user pre-loads his/her card with a certain amount of cash (from 
debit or credit accounts], and then uses the card to buy sen^ices as described 
below. 

If a return channel connection is not available to communicate with 
the CA sen/er, then loading cash to the card requires the user to either access a 
device with back-channel support or go to a particular location (bank, AWi, 
vendor's regional office) to have the card loaded. The CA operators act like the 
card holder's or user's bank, white the billing center acts like the merchant's bank. 
The fixed amount of "cash" loaded into the renewable security device, for 
example, a removable smart card or conditional access module, can now be used 
to pay for services offered by a broadcaster or for the viewing of a recorded 
program. Whichever cash transfer mechanism is employed, the user requests a 
transfer of a specific amount of money to the CA card from a credit or debit 
account. 

Once money is loaded into the card, a user can buy any number of 
sen/ices offered by broadcasters or, perhaps, may be used to purchase "viewing 
rights* for the recorded program. Each purchase reduces the amount of available 
money in the card by the sen/ice price. The services offered by broadcasters can 
be classified into two categories: PPV events and padcages. An event is a TV 
program with an allocated slot in a program guide, and a package is simply a 
collection of events. Examples of packages are (1) all the football games in a 
given season, (2) the late Sunday movies on one or more ATSC virtual channels, 
(3) subscription to a particular virtual channel such as HBO. All events usually 
have one or more of their audiovisual streams scrambled using a common or 
shared symmetric key algorithm. 

Upon purchase of an event or package, a record may be stored in 
the smart card which may be later transfen^d to the CA vendor. Once the stored 
purchase information is sent to the CA database, the CA vendor can pay 
broadcasters for the provided services. 

The security of the system may be based on standard and widely 
accepted public key and symmetric key algorithms. For example, suitable 
algorithms include RSA for public key encryption and triple DES and/or single 
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DES for symmetric key scrambling, tn an exemplary system utilizing these 
algorithms, there is a global RSA public/private key pair, Kpuh/Kpri, for the entire 
s^tem. The public key is shared by all the broadcasters, and the corresponding 
10 private key is placed in the tamper-proof NRSS-based smart cards, distributed by 

5 the CA providers to the consumers. This public key is used to protect the ECMs 
generated at the head-end. It is within the scope of this invention that a 
scrambling algorithm may be a cipher other than DES. 

Symmetric key cryptography involves the use of the same key for 
10 both encryption and decryption. The foundation of publrc-key cryptography is the 
use of two related keys, one public and one private. The private key is a secret 
key, and it is computationally unfeasible to deduce the private key from the public 
2^ key, which is publicly available. Anyone with a public key can encrypt a message. 

but only the person or device having the associated and predetermined private 
15 key can decrypt it. 



30 
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25 A digital home networic 10, as depicted in Figure 1 , is a cluster of 

digital audio/visual (AA/) devices including set-top*boxes 12, TVs 14, VCRs 16, 
DVD players 18 and general-purpose computing devices (not shown) such as 
20 personal computers. Several digital interiaces will be available for device 

interconnection within home networics. For example, EIA-775 DTV 1394 Interface 
Specification defines a specification for a baseband digital interface to a DTV 
which is based on the IEEE 1394 Standard for High Performance Serial Bus. The 
IEEE 1394 serial bus allows digital devices such as televisions, VCRs, DVD 
25 players and set-top-boxes to communicate with each other. It provides two types 
of transport: asynchronous transport for "guaranteed deliver/, and the optional 
isochronous transport for "guaranteed timing.* (Isochronous chcmnels are 
required for multimedia applications.) ElA-761 DTV Remodulator Specification 
with Enhanced OSD Capability and EIA-762 DTV Remodulator Specification 
40 30 defines minimum specificatbns for a one-way data path utilizing an 8 VSB and a 

16 VSB remodulator, respectively, in compliance with ATSC Standard A/53 
Annex D. 

45 The present Invention defines a new paradigm for copy protection 

35 within a digital home networic This paradigm allows the copying of digital content 
that may either be broadcast or pre-corded. The copy is checked for legitimacy 
before display. 



50 



Further, as deprcted in Figure 1 , original copyrighted content is 
40 delivered to the home networi( 1 0 from a number of sources. It may be 
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10 



15 



20 



transmitted via sat O'lte 20. terrestrial 22 or cable 24 systems or recorded on a 
digital tape 26 or a DVD 28. Transmitted or recorded on media, the content can 
be identified as 'never-cop/'. 'copy-once" and Iree-copy". These three states 
are represented using the Copy Generation Management System (CGMS) bits. 
(The CGMS bits are a part of the CCI.) All the A/V devices in the cluster should 
obey ■playback contror, "record contror and "one-generation controP niles as 
summarized below. 




Do aot 
record 



Record and change 
content type to '"no-more- 
copies" in the new copy. 



Do not 
record. 



Record. 
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10 A copy protection system must protect the transmission of the 

audio/video content from one AA/ device to another, and must protect the storage 
of the audioA/ideo content. The present invention defines solutions to both of 
these problems by "keeping content scrambled until it is displayed". It allows 
recording of scrambled content, but prohibits viewing if the content is not 

15 legitimate (i.e.. not an original or a one-generation copy). This is in contrast witfi 
the recording rules as defined in the above table. 

Particularty. Figure 1 illustrates a typical home network comprised of 
various digital audio/video devices capable of receiving digital content (e.g., a 
20 movie) where the present invention may be employed. The digital content is 

encoded with MPEG-2 Transport Stream (TS) format and broadcast together with 
the Entitlement Control Messages (ECMs). An ECM (see Rgure 2a) Is a 
cryptogram of the control word (i.e., descrambling key) and the access conditions. 
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25 The STB or DTV receives the scrambled A/V stream from a source 

(broadcast head-end or player) and transmits it dinectty to a smart card. The 
smart card (SC) 30 is inserted into, or coupled to, a smart card reader (not 
shown); an internal bus interconnects the STB or DTV and the smart card thereby 
permitting the transfer of data therebetween. Such smart cards include, for 

30 example, ISO 7816 cards complying with National Renewable Security Standard 
(NRSS) Part A or PCMCIA cards complying wHh NRSS Part 6. As stated above, 
this inventive concept is not limited to smart cards per se, but can be employed 
with any renewable security device. Conceptually, when a smart card is coupled 
to a smart card reader, the functionality of the smart card may be considered to 
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be a part of the functionality of the digital television, thus r moving the 
•boundaries" created by the physical card body of the smart card. 

The smart card checks if the content is legitimate, recovers the DES 
keys, and descrambtes the stream after checWng the entitlement (An on-screen 
display message (OSD) prompts the consumer to initiate a purchase offer just 
before the movie starts.) A subscription entitlement is stored in the card, but an 
event entitlement is transmitted with the event and used to generate the purchase 
offer). 

Two unique, but related, methods for differentiating copies from an 
original and then verifying if the copy is legitimate prior to enabling the user to 
view the copy are defined below. In either method when the scrambled program 
is to be recorded, the first thing the recording device (e.g., a DVCR or a DVD 
recorder) does is to verify whether the program is scrambled. This may be 
achieved by checking for ECMs which are identified by their packet Identification 
(PID) in the packet header. One altemattve would be to check the Transport 
Scrambling Control (TSC) bits in the transport packet header. Another method 
would be to ascertain whether the program is scrambled as described below. The 
MPEG video syntax includes byte-aligned 32 bit fields called 'start codes" that 
indicate synchronizing points in the bit stream. For example, there are "picture 
start codes" (Ox 00 00 01 00) at the beginning of each frame in the MPEG video 
bit stream. These frames can occur at 60, 50, 30, or 24 frames per second (fps). 
Therefore, a simple test would be to look for picture start codes in the bitstream. 
If the rate of picture start codes per second is close to one of the possible rates, 
then it is reasonable to assume that the bit stream is not encrypted. 

In one embodiment of the present invention if the content is 
scrambled, the recorder encrypts the ECMs using the global public key. Before 
encryption takes place, the recorder attaches a marie (or data item) (see Rgure 
2b) to each ECM as an indication of copying. In general, every time a scrambled 
movie is copied, its ECMs are encrypted once again, a process that may be 
referred to as "nesting". This allows the smartcard to determine how many times 
the original movie has been copied. The following example (wherein GPK is the 
Global public key, E is the Encryption process. CW is the Control word (the key 
for descrambling) and ECM contains CW, CCI, source of the content and other 
data) detects an illegitimate copy and prevents the display thereof. 

Assume an ECM of the movie has the form: Eqpk(CW, never-copy). 
If a recorder receives this ECM, it will transfomi it to: Eqpk IEgpk(CW, never-copy), 
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copy-mar1<)]. The movie with this nested ECM wiil be the output of the recording 
process. When a user attempts to view it, the smart card will detect that it is a 
copy of a "never-cop/* content and wiil not aJlow display. If Ifie movie is a "copy- 
once' content, the ECM will be in the fomi: Eopk (Ecpk(CW, copy-once), copy- 
5 mark)] in the copy. This is an indication of a legitimate copy and the anart card 
will allow viewing. However, if a copy of a copy is created, the ECM wiO have two 
layers ol nesting, for example, [Egpk {Egpk [Eqpk{CW, copy-once), copy-mark)], 
copy-mark}], and the copy will be detected to be illegitimate. 

15 

10 One way to increase the security of the copy protection system is to 

use a local public key for recording purposes. This requires a smart card with a 
unique public/private key pair. For copying a movie, the smart card is coupled to 
20 the VCR and provides the public key. The public key is then used to encrypt the 

ECMs to create a copy that can be played only with the corresponding unique 
15 private key. 

25 Another option to increase the security of the system is to attach a 

unique recorder ID together with the copy-mari< during the ECM nesting process. 
This additional information creates a binding between the copy and the recorder. 
20 Further, both the recorder and the smart card would have the same recorder ID. 
Therefore, viewing of the copy would only be possible with the smart card having 
the recorder ID. 
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Every copyrighted (and encrypted) digital content shall be available 
25 to be copied on any recorder. The created copy, if legitimate, can then be viewed 
according to the ailes of an established payment system. If, for example, a DTV 
receives a scrambled program without a nested ECM, then the DTV would treat 
the program as if It was an original scrambled program and not a copy. That is, 
the DTV would allow the program to be viewed. However, if the user wished to 
40 30 make a copy of the "original program", then the ECM and a data item would 

together be encrypted in accordance with the present Invention. 

In an altemate embodiment of the present invention, the ECMs are 
extended to contain the CGMS bits and access rights as well as control words. 
35 Every lime copyrighted content {e.g., a movie) is recorded, the extended ECMs 
(XECMs) are modified through a one-way. in^eversible transformation (for 
example, hashing) to distinguish copies from the original. A function f from a set 
X to a set Y is called a one-way function if f (x) is easy to compute for all x e X but 
50 (or essentially all ye\m{f)/\\ \s computationally infeasible to find any x e X such 

40 thatf(x)=y. 
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When the smart card receives the XECMs, it processes them 
depending on the type of the system. Two functionally distinct systems can be 
accommodated within this architecture: Conditional Access (CA) systems and 
5 Copy Protection (CP) systems. 

(I) CA system: The smart card is a component of a CA system. Before 

viewing Is allowed, the smart card checks how many times the XECMs are 
modified and responds according to the pre-defined rules of the CA 
system. 



15 

10 



(ii) CP system: The smart card is a component of a CP system. The 

functionality of the smart card is limited. It checks the legitimacy of the 
2^ content and prevents the viewing of illegitimate copies. 

15 The processing of XECMs will be explained using the following example and 
referring to Figures 2C and 3. Assume a movie is being copied on a OVCR. Its 
25 XECM syntax is defined to be XECM = Ek(CW, D/T, content type. Xo),xif where Xq = 

Xi, = f [K) for i > 0 and E is the encryption process, K is the encryption key, CW 
is the control word, D/T is the date and time stamp, xo lsa random number, and /is 

20 a one*way function. 
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(a) Content type is "neverKJopy": 
Recorder input: Ek(CW, D/T, "never-copy", Ab). Xi 
Recorder output: Ek{CW, D/T, "never-cop/, xb), >fe 
25 When the user attempts to view the copy, the card will, after decrypting the 
XECM. compare xo and Xa. If they are not equal, display will not be allowed. 



(b) Content type is "copy-once": 

Recorder Input: Ek(CW, D/T, "copy-once", xb), Xi 
40 30 Recorder output: Ek(CW, D/T, "copy-once", xb), X2 

This time the comparison of xo and %2 will reveal that the copy is legitimate. If. 

however, the 1"* generation copy is the Input to the recorder, the output will be 

illegitimata since f ( f (xo) ) = xa. Note that the XECMs are modified without 
45 consideration of the number of modifications already made. 

35 

In CA systems, the D/T stamp field allows detection of copies made 
by a pirated recorder. When a card detects an "old" XECM that has not been 
modified. It will consider it to be a pirate copy. In CP systems, the D/T stamp can 
be used to assign limited lifetime to prerecorded media and authorized copies 
40 made from them. 
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A very important feature of the 'XECM modification" scheme is that 
it gives the content distributors (broadcasters and publishers) complete freedom 
in choosing their encryption algorithm for creating the XECMs. Hence, although 
5 the copy protection system is constructed as an extension of the CA systems, it is 
"decoupled". The only requirement is to use the common structure for the XECf^. 

As described below, the XECM originating at the content source has 
two sections: Private and Mandatory. The Private section contains fields that are 
10 privately defined by the operators of CA and CP systems. The Mandatory section 
contains three fields that must be included in all XECMs. 



^ The fields in the Private section of the XECM include: XECMJd 

(Unique identifier for the Extended Entitlement Control Message). XECM .length 
15 (an 8-bit field specifying the number of bytes in the XECM), fonnatjdentifier (a 
32-bit field that Identifies the registration authority that assigns values to the 
25 provider Jndex field) . providerjndex (a 1 6-bit field that identifies the content 

provider). program_eventJd (a 24-bit field that identifies a particular TV program 
or event). transport_streamJd (a 16-bit field that Identifies the Transport Stream 
20 where the event is being carried), source Jd (a 16-bit field that identifies uniquely 
the particular service where the event is being transmitted), eventjd (a 14-bit 
field that identifies uniquely a particular event within a given service of this 
Transport Stream), startjime (a 32-bit field indicating the event start time), 
length Jn_seconds (a 20-bit field indicating the length of the event), title.segment 
25 (the first 10 characters of the English title for the event that this message 
describes), event^rice (a BCD field which indicates the cost of the event). 
scrambling_Key (a 64-bit key necessary for de-scrambling the video and audio 
signals for the event under consideration), descriptorsjength (the total length of 
the descriptor list that follows the descriptors). The Mandatory section of the 
40 30 XECM include: CCI — Copy Control Information (CGMS bits. APS trigger bits and 

Digital Source bit). copyJndicatorJnitial_value (a random bit sequerwe) and 
copyjndicator (a bit sequence equal to copyJndicatorJnitiaLvalue). 
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DTV 1 4 is the final destination of the digital content 40 for viev/ing. 

35 It receives the scrambled A/V stream from a source (broadcast/cable head-end, 
satellite, cable STB, DBS STB or playback device) and transmits it directly to the 
smart card 30. Smart card 30 checks if the content is legitimate. For example, if 
it receives a broadcast PPV movie, an OSD prompts the consumer to initiate a 
purchase offer before the movie starts. If the movie is purchased, a record is 

40 stored in the card. The card then recovers the scrambling keys and descrambles 
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the stream. The information about the event (pric , start time, length, etc.) 
contained in the XECMs is used to generate the purchase offer. Rnalty. DTV 14 
outputs the same stream it receives. 

If a movie is to be recorded, the OVCR detects and mocfifies the 
XECIWs. In addition, the Transport Scrambling Control (TSC) bits in the transport 
packet header can be chedced to see rf the content is scrambled. 
If the content is not scrambled, it is copied as Is. In general, every time a 
scrambled movie is copied, its XECMs are modified once again. This allows the 
smart card to determine how many times the original movie has been copied. 
Optionally, the XECM modification functionality can be assigned to a smart card 
inserted to the recorder. In this case, the recorder needs to have a smart card 
reader. 

While the Invention has been described In detail with respect to 
numerous embodiments thereof, it will be apparent that upon reading and 
understanding of the foregoing, numerous alterations to the described 
embodiment wiD occur to those skilled in the art and it is intended to include such 
alterations within the scope of the appended claims. 
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Claims 

1 . A method for copying a program having a scrambled program content 
component and an encrypted control component comprising: 

(a) receiving, In a recording apparatus, said program; 

(b) attaching a data item to said encrypted control component, said 
data item indicating that said program has been copied; 

(c) encrypting said encrypted control component and said data item to 
generate a nested control component; and 

(d) recording said program content component and said nested control 
component. 

2. The method of Claim 1 wherein the steps of receiving, attaching and 
encrypting are performed in a smart card coupled to said recording 
apparatus. 

3. The method of Claim 2 wherein said encrypted control component 
comprises copy control information, a descrambling key associated with 
said scrambled program content component. 

4. The method of Claim 3 wherein said copy control information indicates one 
of never-copy state and copy-once state. 

5. The method of Claim 4 wherein said encrypted control component is 
encrypted using a global public key. 

6. The method of Claim 5 wherein said nested control component is 
encrypted using said global public key. 
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7. The m thod of Claim 6 wherein said global public key is associated with 
said smart card, said smart card having a corresponding private key stored 
therein. 

8. The method of Claim 7 wherein said encrypted control component further 
comprises purchase infomiatlon comprising channel identification data, 
event identity data, date and time stamp data, and bilDng data. 

9. The method of Claim B wherein said smart card comprises a card body 
with a plurality of terminals arranged on a surface of said card body in 
accordance with one of ISO 7816 and PCMCIA card standards. 

10. The method of Claim 9 wherein said recording apparatus is a digital video 
cassette recorder. 

1 1 . The method of Claim 10 wherein said recording apparatus is a recordable 
DVD apparatus. 

12. A method for managing access to a copy of a restricted program, said 
method comprising: 

(a) receiving said restricted program in a processing apparatus, said 
restricted program having a scrambled program content component 
and a nested control component, said nested control component 
being encrypted; 

(b) decrypting said nested control component to obtain an encrypted 
control component and a data item, said data item indicating that 
said restricted program has been copied; 

(c) decrypting said encrypted control component to obtain a 
descrambling key and copy control information; 
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(d) comparing said copy control information and said data item to 
determine if said copy is valid; and 

(e) descrambling said program content component, using said 
descrambOng key in response to a determination that said copy ts 
valid. 

1 3. The method of Claim 1 2 wherein said encrypted control component and 
said nested control component are encrypted using a global public key. 

14. The method of Claim 13 wherein the steps of receiving, decrypting, 
comparing and descrambling are performed in a smart card coupled to 
said processing apparatus, said steps of decrypting employ a private key 
stored in said smart card and associated with said global public key. 

1 5. The method of Claim 1 4 wherein said encrypted control component further 
comprises purchase infomnation comprising channel identification data, 
event identity data, date and time stamp data, and billing data. 

16. The method of Claim 15 wherein said purchase infomiation comprises the 
cost of said program, said method further comprising: 

(a) deducting the cost of said program from a cash reserve stored in 
said smart card to determine a calculated cash resen/e; 

(b) descrambling, in said smart card, said scrambled program content 
component using said descrambling key in response to having a 
posKive calculated cash reserve; and 

(c) passing said descrambled transmitted event to said video 
processing apparatus. 

17. The method of Claim 16 wherein said cash reserve is downloaded in an e- 
cash certificate message from an automatic teller machine. 
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18. Th8 method of Claim 17 wherein said processing apparatus is one of a 
digital video cassette recorder/player and a DVD recorder/player. 

1 9. The method of Ctaim 1 8 wherein said smart card comprises a card body 
with a plurality of terminals arranged on a surface of said card body in accordance 
wth one of ISO 7816 and PCMCIA card standards. 

20. A method for managing access to a recorded copy of a restricted program 
using a smart card coupled to a video processing apparatus comprises: 

(a) transferring, from a bank, a cash resewe to said smart card; 

(b) receiving, in said smart card, said recorded copy of said restricted 
program from said video processing apparatus, said restricted 
program having a scrambled audio/video component and a nested 
control component, said nested control component being encrypted; 

(c) decrypting said nested control component (o obtain an encrypted 
control component and a data item, said data item indicating that 
said restricted program has been copied; 

(d) decrypting said encrypted control component to obtain a 
descrambling key. copy control information and purchase 
information; 

(e) comparing said copy control information and said data item to 
determine if said copy is valid; 

(f) verifying that the cost of said restricted program is less than the 
stored cash resen/e and deducting the cost of said restricted 
program from said stored cash reserve; 

(g) descrambling said audio/video component, using said descrambling 
key. 
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